samba - Apr 2012 - Problems accessing Windows shares 3.5.8 vs 3.6.3

I am trying to get Samba up and working on Solaris 10.

I have a seperate discussion going on about my problems getting Samba 358 on
Solaris 10 to authenticate to a Windows 2008R2 domain (See XXXX)



As a different solution I have downloaded the source code for 3.6.3 and
compiled it  The provlem I am having is it won't work with my Windows
machines
at all

i.e.  Using the 3.5.8 binary I can do a smbclient -L dc1 -U bob and it will
return the list of shares.  Using the 3.6.3 binary with the same config file I
get NT_STATUS_LOGON_FAILURE

It was compile with the following options:

./configure --prefix=/samba.test --with-automount --with-ldap=/usr/local
--with-quotas --with-sys-quotas --with-acl-support --with-aio-support
--with-pam --includedir=/usr/local/include --with-libiconv=/usr/local
--with-readline=/usr/local --with-winbind --with-pam_smbpass
--with-krb5=/usr/local --with-ads --disable-krb5developer

Most of the pre-reqs came from the sunfreeware site except for libintl
(gettext) which I downloaded and compiled as the one from sunfreeware would
not link correctly.

I have also followed the notes I found somewhere that had me change the
makefile:

1: search for -lthread and add -lintl after it for every instance
2: search for -Wl,-z,defs and remove them all

This allows me to successfully compile Samba  However - no windows client (or
for that matter no other version of samba I have) can talk to these samba
serversris  ONLY the smbclient from 3.6.3 will work


Any ideas why this is the case?
What else can I send along to help?

Thanks,
Chris

Had you compiled 3.5.8 from source, or was this the Sun bundled
person.   You may have noticed that Oracle provides 119757-21  /
119758-21 to upgrade to 3.5.10, although I don't see anything in the
readme about it fixing issues with Win 2008 R2.


Does smbclient work if you specify host IP instead of host name?    I
found  compiling Samba on Solaris to be very difficult.    I had issues
with remote clients that could connect by IP but not by name.   
Problems went away with the Oracle provided build. 

What happens if you create an anon share on the win server and then try
connecting with out specifying a user name?

Did you try watching the traffic with tcpdump?  Are the win machines
responding at all?   Are there entries of interest in the Windows server
logs?     Is samba trying to use NTLMv2 ?

On 04/16/12 09:18, Christopher Davis wrote:
> I am trying to get Samba up and working on Solaris 10.
>
> I have a seperate discussion going on about my problems getting Samba 358
on
> Solaris 10 to authenticate to a Windows 2008R2 domain (See XXXX)
>
>
>
> As a different solution I have downloaded the source code for 3.6.3 and
> compiled it  The provlem I am having is it won't work with my Windows
machines
> at all
>
> i.e.  Using the 3.5.8 binary I can do a smbclient -L dc1 -U bob and it will
> return the list of shares.  Using the 3.6.3 binary with the same config
file I
> get NT_STATUS_LOGON_FAILURE
>
> It was compile with the following options:
>
> ./configure --prefix=/samba.test --with-automount --with-ldap=/usr/local
> --with-quotas --with-sys-quotas --with-acl-support --with-aio-support
> --with-pam --includedir=/usr/local/include --with-libiconv=/usr/local
> --with-readline=/usr/local --with-winbind --with-pam_smbpass
> --with-krb5=/usr/local --with-ads --disable-krb5developer
>
> Most of the pre-reqs came from the sunfreeware site except for libintl
> (gettext) which I downloaded and compiled as the one from sunfreeware would
> not link correctly.
>
> I have also followed the notes I found somewhere that had me change the
> makefile:
>
> 1: search for -lthread and add -lintl after it for every instance
> 2: search for -Wl,-z,defs and remove them all
>
> This allows me to successfully compile Samba  However - no windows client
(or
> for that matter no other version of samba I have) can talk to these samba
> serversris  ONLY the smbclient from 3.6.3 will work
>
>
> Any ideas why this is the case?
> What else can I send along to help?
>
> Thanks,
> Chris
>

As I recall, Win2008 was the end of the line for Samba-on-Solaris10 for
us.  We adopted a product called Centrify which included its own
AD-binding / kerberos authentication mechanisms for Solaris 10, and their
own build of Samba that worked with it.

That's been working perfectly with AD 2008, and I recommend it highly.

--Rob


Rob LaRose systems administrator
imaginary forces | 530 west 25th street | new york | p 646.486.6868 |
www.imaginaryforces.com <http://www.imaginaryforces.com/>








On 4/16/12 9:18 AM, "Christopher Davis" <giarmdok at usa.net>
wrote:
>I am trying to get Samba up and working on Solaris 10.
>
>I have a seperate discussion going on about my problems getting Samba 358
>on
>Solaris 10 to authenticate to a Windows 2008R2 domain (See XXXX)
>
>
>
>As a different solution I have downloaded the source code for 3.6.3 and
>compiled it  The provlem I am having is it won't work with my Windows
>machines
>at all
>
>i.e.  Using the 3.5.8 binary I can do a smbclient -L dc1 -U bob and it
>will
>return the list of shares.  Using the 3.6.3 binary with the same config
>file I
>get NT_STATUS_LOGON_FAILURE
>
>It was compile with the following options:
>
>./configure --prefix=/samba.test --with-automount --with-ldap=/usr/local
>--with-quotas --with-sys-quotas --with-acl-support --with-aio-support
>--with-pam --includedir=/usr/local/include --with-libiconv=/usr/local
>--with-readline=/usr/local --with-winbind --with-pam_smbpass
>--with-krb5=/usr/local --with-ads --disable-krb5developer
>
>Most of the pre-reqs came from the sunfreeware site except for libintl
>(gettext) which I downloaded and compiled as the one from sunfreeware
>would
>not link correctly.
>
>I have also followed the notes I found somewhere that had me change the
>makefile:
>
>1: search for -lthread and add -lintl after it for every instance
>2: search for -Wl,-z,defs and remove them all
>
>This allows me to successfully compile Samba  However - no windows client
>(or
>for that matter no other version of samba I have) can talk to these samba
>serversris  ONLY the smbclient from 3.6.3 will work
>
>
>Any ideas why this is the case?
>What else can I send along to help?
>
>Thanks,
>Chris
>
>--
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba

________________________________

This e-mail is intended only for the named person or entity to which it is
addressed and contains valuable business information that is proprietary,
privileged, confidential and/or otherwise protected from disclosure. If you
received this e-mail in error, any review, use, dissemination, distribution or
copying of this e-mail is strictly prohibited. Please notify us immediately of
the error via e-mail to <ifpostmaster> postmaster at imaginaryforces.com
and please delete the e-mail from your system, retaining no copies in any media.
We appreciate your cooperation.

...imaginaryforces.com...